// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CHROME_BROWSER_ACTOR_TOOLS_ATTEMPT_LOGIN_TOOL_H_
#define CHROME_BROWSER_ACTOR_TOOLS_ATTEMPT_LOGIN_TOOL_H_

#include <optional>
#include <vector>

#include "base/callback_list.h"
#include "base/containers/flat_map.h"
#include "base/functional/callback_forward.h"
#include "base/memory/weak_ptr.h"
#include "base/task/cancelable_task_tracker.h"
#include "chrome/browser/actor/tools/tool.h"
#include "chrome/browser/actor/tools/tool_callbacks.h"
#include "chrome/common/actor_webui.mojom-forward.h"
#include "components/actor/core/shared_types.h"
#include "components/actor/public/mojom/actor_types.mojom-forward.h"
#include "components/password_manager/core/browser/actor_login/actor_login_quality_logger.h"
#include "components/password_manager/core/browser/actor_login/actor_login_service.h"
#include "components/tabs/public/tab_interface.h"

class GURL;
namespace favicon_base {
struct FaviconImageResult;
}  // namespace favicon_base

namespace gfx {
class Image;
}  // namespace gfx

namespace actor {

class AttemptLoginTool : public Tool {
 public:
  AttemptLoginTool(TaskId task_id,
                   ToolDelegate& tool_delegate,
                   tabs::TabInterface& tab,
                   std::optional<PageTarget> password_button,
                   std::optional<PageTarget> sign_in_with_google_button,
                   bool requires_opening_web_contents);
  ~AttemptLoginTool() override;

  // actor::Tool
  void Validate(ToolCallback callback) override;
  void Invoke(ToolCallback callback) override;
  std::string DebugString() const override;
  std::string JournalEvent() const override;
  std::unique_ptr<ObservationDelayController> GetObservationDelayer(
      ObservationDelayController::PageStabilityConfig page_stability_config)
      override;
  void UpdateTaskBeforeInvoke(ActorTask& task,
                              ToolCallback callback) const override;
  tabs::TabHandle GetTargetTab() const override;

 private:
  void OnGetCredentials(actor_login::CredentialsOrError credentials);
  void FetchIcons();
  void OnIconFetched(base::RepeatingClosure barrier,
                     GURL origin,
                     const favicon_base::FaviconImageResult& result);
  void OnAllIconsFetched();
  void OnAffiliationsUpdated();
  void OnCredentialCachingDone(
      actor_login::Credential selected_credential,
      webui::mojom::UserGrantedPermissionDuration permission_duration);
  void OnCredentialSelected(
      webui::mojom::SelectCredentialDialogResponsePtr response);
  void SetUserSelectedCredential(
      actor_login::Credential selected_credential,
      webui::mojom::UserGrantedPermissionDuration permission_duration);
  void OnAttemptLogin(actor_login::Credential selected_credential,
                      bool should_store_permission,
                      actor_login::LoginStatusResultOrError login_status);

  // Callbacks for the various activation subscriptions.
  void OnWillDetach(tabs::TabInterface* tab,
                    tabs::TabInterface::DetachReason reason);
  void HandleTabActivatedChange(tabs::TabInterface* tab);
  void HandleWindowActivatedChange(BrowserWindowInterface* browser_window);

  void ObserveTabToAwaitFocus();
  void StopObservingTab();
  void MaybeRetryCredentialNeedingFocus();

  actor_login::ActorLoginService& GetActorLoginService();
  actor_login::FrameFillingStartedCallback GetFrameFillingStartedCallback(
      tabs::TabInterface* tab,
      const actor_login::Credential& credential);

  // Holds the credentials after they are returned from the login service. The
  // credentials are cleared after the login attempt is made.
  std::vector<actor_login::Credential> credentials_;

  // If present, the attempt to use this credential was temporarily rejected due
  // to the need to focus the affected task. Once we have focus, we'll retry.
  std::optional<
      std::pair<actor_login::Credential, bool /*should_store_permission*/>>
      credential_awaiting_task_focus_;

  // These activation related subscriptions are to monitor for when we can retry
  // `credential_awaiting_task_focus_`.
  base::CallbackListSubscription will_detach_subscription_;
  base::CallbackListSubscription tab_did_activate_subscription_;
  base::CallbackListSubscription window_did_become_active_subscription_;

  // Stores the icons for each unique `source_site_or_app` in `credentials_`.
  // Populated by `OnIconFetched()`.
  base::flat_map<std::string, gfx::Image> fetched_icons_;

  std::vector<base::CancelableTaskTracker> favicon_requests_tracker_;

  tabs::TabHandle tab_handle_;

  // Identifies a button to submit (or advance) a password form.
  std::optional<PageTarget> password_button_;
  // Identifies a "Sign in with Google" button.
  std::optional<PageTarget> sign_in_with_google_button_;

  const bool requires_opening_web_contents_;

  // The time where the attempt tool is created, used to calculate the overall
  // time of the flow until filling and submission time.
  const base::TimeTicks attempt_login_tool_start_time_;

  // Helper class which uploads the model quality log for each filling.
  ActorLoginQualityLogger quality_logger_;

  // Set on invocation. Used to check if the document changed during credential
  // selection.
  content::GlobalRenderFrameHostToken main_rfh_token_;

  ToolCallback invoke_callback_;

  // Track if the affiliations update has finished. This is only relevant on
  // Android. On other platforms, the update happens on startup.
  bool affiliations_updated_ = !BUILDFLAG(IS_ANDROID);
  base::OnceClosure on_affiliations_updated_callback_;

  base::WeakPtrFactory<AttemptLoginTool> weak_ptr_factory_{this};
};

}  // namespace actor

#endif  // CHROME_BROWSER_ACTOR_TOOLS_ATTEMPT_LOGIN_TOOL_H_